Privacy Policy
Last updated: August 11, 2026
Publisher: Arcustin Yapay Zeka Teknolojileri Anonim Şirketi
This Privacy Policy explains how Arcustin Yapay Zeka Teknolojileri Anonim Şirketi ("Arcustin", "we", "us" or "our") processes personal data when you use the Arcustin iOS mobile game that displays or links to this Privacy Policy (the "Game"), including its iOS application, anonymous player profile, leaderboard, in-app purchases, advertising, push notifications and customer support (collectively, the "Services"). It applies to the Game and not automatically to other Arcustin products or third-party services.
The Game is a general-audience casual puzzle game. It is not offered in Apple's Kids Category. Its App Store age rating describes content suitability and does not mean that the game is specifically directed to children.
Privacy at a Glance
No user-facing account: the Game does not ask you to create a password or provide your Apple Account name or email address. Firebase and Supabase create anonymous technical identifiers.
Privacy-protective advertising: the Game currently uses Google AdMob for non-personalized rewarded and interstitial ads. It does not use Apple's IDFA or cross-app tracking for advertising.
Limited public profile: other players may see only the nickname you choose, one of nine pre-designed in-game avatars, your score and leaderboard ranking.
No sale of personal data: Arcustin does not sell personal data or share it for cross-context behavioral advertising.
Backend location and retention: the Supabase project is hosted in a Europe region, and backend user data for the Game is generally retained for no longer than three years, subject to the exceptions below.
Your rights: you may request access, correction or deletion by contacting info@arcustin.com.
1. Data Controller and Contact Details
For the processing described in this Privacy Policy, the data controller is Arcustin Yapay Zeka Teknolojileri Anonim Şirketi. Our contact details are:
Arcustin Yapay Zeka Teknolojileri Anonim Şirketi
Ayazağa Mahallesi, Kemerburgaz Caddesi, Vadi İstanbul Park Sitesi, 7A Blok No: 7B, İç Kapı No: 4, 34396 Sarıyer/İstanbul, Türkiye
Email: info@arcustin.com
2. Personal Data We Collect
2.1 Information you choose to provide
Profile information: the nickname you choose and one of nine Arcustin-provided in-game avatars. You do not need to use your real name.
Reports and support: the content of a nickname report, support request, privacy request or other message you send us, together with your email address if you contact us by email.
Feedback: ideas, survey responses or comments you voluntarily provide, if a feedback feature is offered.
2.2 Anonymous identifiers and profile records
The Game uses anonymous authentication in Firebase Authentication and Supabase Auth. This creates pseudonymous or app-scoped records that may include a Firebase user identifier, Supabase user identifier, internal player identifier, Firebase Installation identifier, Identifier for Vendor (IDFV) or similar identifiers needed to distinguish an installation or player profile. These records are not user-facing login accounts and are not linked by Arcustin to your Apple Account name or email address.
2.3 Gameplay, economy and leaderboard data
level starts, completions, failures, attempts, moves, session duration and gameplay progress;
scores, achievements, leaderboard rank, nickname and selected avatar;
coin and booster balances, rewards, inventory, offer views and item use;
season-pass, bundle, fail-offer and other purchase or entitlement status; and
game configuration, remote-config assignment, A/B test assignment and feature interactions.
2.4 Device, network, analytics and diagnostic data
We and our service providers may automatically process IP address, approximate country or region derived from IP, device model, operating-system version, app version, language, time zone, connection and request timestamps, installation information, performance measurements, crash reports, error logs, security events and analytics events. We do not request precise GPS location, contacts, photos, camera, microphone or health data for the Game.
2.5 Purchase data
When you make an in-app purchase, Apple processes the payment. Arcustin may receive the product identifier, transaction identifier, receipt or validation data, purchase date, storefront or region, price tier, refund or revocation status, and delivery status needed to fulfill and support the purchase. Arcustin does not receive your full payment-card number, bank-account credentials or Apple Account password.
2.6 Advertising and consent data
For rewarded and interstitial ads, Google AdMob may process ad requests, impressions, clicks, completion and reward events, coarse contextual information, IP address, app/device information, consent signals and identifiers used for fraud prevention, frequency control or aggregated reporting. The Game is currently configured not to serve personalized ads and not to access Apple's Identifier for Advertisers (IDFA). We do not use data to track you across apps or websites owned by other companies.
Non-personalized advertising is based on context rather than your past behavior, but Google explains that it may still use limited identifiers or storage for functions such as frequency capping, fraud prevention and aggregated ad reporting. The Game uses Google's User Messaging Platform (UMP) to present and record privacy choices where required. The app may also display Apple's App Tracking Transparency prompt; under the current configuration of the Game, Arcustin does not access IDFA even if permission is granted.
2.7 Push-notification data
If you allow notifications, Apple Push Notification service and Firebase Cloud Messaging may process an app/device push token, notification preferences, delivery status and interaction data, such as whether a notification was opened. We use this information to send game-related reminders, events, rewards, service notices or other notifications permitted by your settings and applicable law.
2.8 iCloud Key-Value Store data
If iCloud is enabled for the Game, selected preferences, configuration, app state or progress information may be stored in Apple's iCloud Key-Value Store so it can remain available to the Game across compatible devices signed in to the same Apple Account. Arcustin does not receive your Apple Account name or email address through this feature. Apple controls iCloud infrastructure and your iCloud settings.
3. How We Collect Data
We collect personal data:
directly from you when you choose a nickname, submit a report or contact support;
automatically from the app and device when you install, launch or use the Game;
from Apple when Apple confirms an App Store transaction, refund, revocation, notification delivery or iCloud operation; and
from our service providers, including Google Firebase, Google AdMob and Supabase, when they provide the technical services described in this policy.
4. Why We Use Data and Our Legal Bases
4.1 To provide and administer the Game
We use identifiers, gameplay, profile, leaderboard, balance, purchase, notification and iCloud-related data to run the game, save progress, display scores, deliver Virtual Items, restore eligible purchases, provide support and enforce the Terms of Use. Where applicable, the legal basis is performance of our contract with you or steps taken at your request before entering into that contract.
4.2 To improve, test and personalize the in-game experience
We use analytics, gameplay events, Remote Config and A/B Testing to understand performance, balance levels and rewards, diagnose problems, measure feature use, optimize offers, develop new content and improve the player experience. Where permitted, we rely on our legitimate interests in operating and improving a safe, effective game. Where consent is required for a particular technology or jurisdiction, we rely on consent and respect your choice.
4.3 To provide non-personalized advertising
We use AdMob data to request, display and measure non-personalized rewarded and interstitial ads, grant advertised rewards, control frequency and prevent fraud. Depending on your location and the specific storage or processing involved, we rely on consent, performance of the service you request, or legitimate interests, as permitted by law. We do not rely on acceptance of this Privacy Policy as consent where separate consent is legally required.
4.4 To communicate with you
We use support messages and notification data to respond to requests and, if you enable notifications, to send permitted game-related notices. We rely on your request, performance of our contract, legitimate interests in supporting the Services, or consent where required. You can disable push notifications at any time in iOS Settings.
4.5 Security, moderation and legal compliance
We use identifiers, logs, purchase records, reports and gameplay data to prevent cheating, fraud, abuse, security incidents and unlawful conduct; investigate reports; protect players and Arcustin; establish or defend legal claims; comply with lawful requests; and meet tax, accounting, consumer and data-protection obligations. The legal bases are our legitimate interests, compliance with legal obligations, performance of the Terms and the establishment, exercise or defense of legal rights, as applicable.
5. Public Leaderboard and Nickname Moderation
Your chosen nickname, selected in-game avatar, score and ranking may be visible to other players. Do not use a real name or include personal or sensitive information in a nickname. The Game applies a profanity/content filter and provides a reporting feature. We may review reports and reject, reset, hide or remove a nickname or leaderboard entry that violates the Terms of Use, threatens player safety or infringes rights.
6. Advertising Choices and Tracking
The Game currently uses only Google AdMob and does not currently enable third-party mediation networks. Ads are rewarded and interstitial; no banner ads are currently used. The Game is configured for non-personalized advertising and does not access IDFA or conduct cross-app tracking.
You can control advertising and related privacy settings as follows:
Use the UMP privacy-options control presented in the Game where required to review or change available consent choices.
Manage Apple's tracking permission under iOS Settings > Privacy & Security > Tracking. Under the current configuration, the Game does not access IDFA even if tracking permission is granted.
You may decline an optional rewarded ad and continue using the game without receiving the advertised reward. Interstitial advertising may still appear unless removed by an applicable purchased feature.
If Arcustin later activates AppLovin, Unity Ads or another advertising or mediation provider, we will update this policy and applicable consent and App Store disclosures before using that provider.
7. When and With Whom We Share Data
We share data only as needed to operate, secure and support the Game, comply with law, or complete a corporate transaction. Service providers may act as processors on our instructions or, for limited platform and advertising functions, as independent controllers under their own privacy terms.
Provider, Services used and Purpose and current configuration
Google Firebase
Anonymous authentication, Analytics, Crashlytics, Cloud Messaging, Remote Config, A/B Testing, Performance Monitoring, Installations and Realtime Database. Cloud Firestore is not used.
App operation, analytics, diagnostics, security, push delivery and feature configuration.
Google AdMob
Rewarded and interstitial advertising, ad delivery, frequency control, fraud prevention and aggregated reporting.
Non-personalized advertising only. No AdMob mediation networks are currently enabled.
Supabase
Database, anonymous authentication, storage, realtime features and edge functions, hosted in a Europe region selected by Arcustin.
Backend hosting and operation of player profiles, progress, balances, leaderboard and related records.
Apple
App Store, StoreKit, iCloud Key-Value Store, Apple Push Notification service and related iOS platform services.
Distribution, purchases, restore functions, iCloud sync and notification delivery.
7.1 Other players
Other players may see your nickname, one of the nine preset avatars, score and ranking on the leaderboard. They do not receive your Apple Account name, email address, anonymous authentication identifiers, IP address or purchase records from us.
7.2 Legal, safety and corporate disclosures
We may disclose relevant data to courts, regulators, law-enforcement authorities, advisers, auditors, insurers or other parties when reasonably necessary to comply with law, protect rights or safety, investigate fraud or security incidents, or establish, exercise or defend legal claims. If Arcustin is involved in a merger, acquisition, financing, reorganization or sale of all or part of its business, data may be disclosed under appropriate confidentiality and data-protection safeguards and transferred as permitted by law.
8. No Sale or Cross-Context Behavioral Advertising
Arcustin does not sell personal data for money or other valuable consideration. Under the current configuration of the Game, Arcustin does not share personal data for cross-context behavioral advertising or use personal data for targeted advertising based on activity across unrelated apps or websites. Google may process limited data to provide non-personalized advertising, frequency control, fraud prevention and aggregated reporting as described above.
9. International Data Transfers
The Game is available globally. Arcustin is established in Türkiye; the Supabase project is hosted in a selected Europe region; and Google, Apple, Supabase and their subprocessors may process data in countries where they or their service providers operate. Those countries may have data-protection laws different from the laws where you live.
Where applicable law requires transfer safeguards, we use or require appropriate lawful mechanisms, which may include adequacy decisions, standard contractual clauses, contractual commitments, security measures or another mechanism recognized by the relevant authority. For transfers subject to Turkish data-protection law, Arcustin will rely on a transfer method permitted by Article 9 of Law No. 6698, as applicable. You may contact us for more information about relevant safeguards.
10. Data Retention and Deletion
backend user, profile and gameplay data for the Game stored through Supabase is generally retained for no longer than three years, with the period assessed according to the record's purpose, last relevant activity, legal requirements and operational need. We may delete or anonymize data earlier when it is no longer needed or after a valid deletion request.
We may retain specific records longer when required for tax, accounting, payment, fraud-prevention, dispute, security, regulatory or legal-claims purposes. Backup copies may remain for a limited cycle before secure overwrite. Public leaderboard caches and provider systems may require a short period to reflect deletion. Google, Apple and other providers apply their own documented retention periods to data they process under their respective roles.
Uninstalling the Game stops future collection from that installation but does not automatically delete data already stored in our backend or by a service provider. A deletion request may permanently remove your progress, leaderboard entry, balances and unused Virtual Items and may make them impossible to restore.
11. Security
We use reasonable technical and organizational measures designed to protect personal data, including access controls, encrypted network transport, provider security controls, logging and procedures for handling incidents and requests. No internet, mobile or storage system is completely secure, and we cannot guarantee absolute security. You should keep your device, Apple Account and operating system secure and avoid including personal information in your nickname.
12. Your Choices
Notifications: allow or disable notifications from the Game in iOS Settings.
Advertising privacy: use the in-app UMP privacy-options control where available and manage Apple's tracking setting in iOS. The Game currently does not use IDFA or personalized ads.
iCloud: turn the Game's iCloud access on or off in your Apple iCloud settings. Turning it off may affect sync or restoration of app state.
Nickname and avatar: change them through the Game where the feature is available, or report an inappropriate nickname using the in-game report function.
Data request or deletion: email info@arcustin.com and include the anonymous player ID or current nickname shown in the app if available, but do not send passwords, payment-card details or Apple Account credentials.
Because the Game uses anonymous identifiers, we may ask for limited information needed to locate the relevant record and verify that the requester controls the associated installation or profile. If we cannot reasonably link a request to a record without collecting disproportionate additional data, we will explain the limitation where required by law.
13. Your Privacy Rights
Depending on where you live and subject to legal conditions and exceptions, you may have rights to know whether we process personal data about you; access or receive a copy; correct inaccurate data; request deletion; restrict or object to processing; withdraw consent; receive portable data; and complain to a data-protection authority. You will not be discriminated against for exercising a privacy right. Withdrawing consent does not affect processing that was lawful before withdrawal.
13.1 Türkiye
Under Article 11 of Türkiye's Law No. 6698 on the Protection of Personal Data (KVKK), data subjects may ask whether personal data is processed; request information; learn the purpose and whether data is used accordingly; learn recipients in Türkiye or abroad; request correction of incomplete or inaccurate data; request deletion or destruction where the legal conditions apply; request notification of correction or deletion to recipients; object to a result arising exclusively from automated analysis that is against the person; and request compensation for damage caused by unlawful processing. Requests may be sent to the contact details in Section 1 using a method permitted by applicable law.
13.2 EEA, United Kingdom and Switzerland
Where the GDPR, UK GDPR or Swiss data-protection law applies, you may have rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent, and the right to complain to the supervisory authority where you live, work or where an alleged infringement occurred. You may object to processing based on legitimate interests; we will stop unless compelling legitimate grounds or legal claims justify continued processing. You may object at any time to direct marketing.
13.3 United States
Where an applicable U.S. state privacy law applies to Arcustin and to your request, you may have rights to know, access, correct, delete or obtain a portable copy of personal data; opt out of sale, targeted advertising or certain profiling; limit certain uses of sensitive personal information; and appeal a denied request. Arcustin does not currently sell personal data, share it for cross-context behavioral advertising, use it for targeted advertising, or intentionally collect sensitive personal information through the Game. Authorized agents may submit requests where permitted, subject to verification.
13.4 Other jurisdictions
Residents of Canada, Brazil, Australia and other jurisdictions may have additional local rights. Contact us and identify your country or region so we can evaluate and respond under the applicable law.
14. Children and Teen Players
The Game is a general-audience casual puzzle game and is not specifically directed to children under 13. The Terms of Use require users to be at least 13 and require parental or guardian approval for minors where applicable. We do not knowingly request or collect a child's real name, email address or precise location through the game.
We apply privacy-protective defaults to all players: no personalized advertising, no IDFA or cross-app tracking, no requirement to use a real name, a limited set of Arcustin-provided avatars, and nickname filtering and reporting. If we learn that we collected personal data from a child in circumstances requiring parental authorization without that authorization, we will delete or otherwise address the data as required by law. A parent or guardian may contact info@arcustin.com with the available anonymous player ID or nickname.
15. Automated Processing
The Game may use rules, analytics, Remote Config and A/B Testing to assign game configurations, balance content, detect suspected cheating or fraud, and determine which in-game offer or event to display. We do not currently use personal data to make decisions that produce legal or similarly significant effects solely by automated means.
16. Changes to This Privacy Policy
We may update this Privacy Policy when the Game, our providers or applicable law changes. We will post the updated version and revise the "Last updated" date. If a change materially affects your privacy rights or introduces a new use requiring consent, we will provide additional notice or request consent as required before that processing begins.
17. Contact Us
For privacy questions, requests or complaints, contact:
Arcustin Yapay Zeka Teknolojileri Anonim Şirketi
Ayazağa Mahallesi, Kemerburgaz Caddesi, Vadi İstanbul Park Sitesi, 7A Blok No: 7B, İç Kapı No: 4, 34396 Sarıyer/İstanbul, Türkiye
Email: info@arcustin.com